$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: zW2EnQQal1/HX9eBiSQqKI6lTAFO12ggZwL8oKegT5o= Subject key identifier: 71:E4:FA:2A:A8:29:F2:CE:B5:A4:4C:67:8E:E1:C0:EA:8D:CA:53:7F Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0F25 Signing time: Fri 22 Aug 2025 21:33:52 +0000 Manifest this update: Fri 22 Aug 2025 21:33:52 +0000 Manifest next update: Fri 29 Aug 2025 21:33:52 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: XckoBT5pdcoVCjUxzEHHOJPlOBUlAWfZEw7rLZ/c9Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Aug 22 21:33:52 2025 GMT Not After : Aug 29 21:33:52 2025 GMT Subject: CN=68a8e240-d702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:60:7b:6a:67:34:8b:27:8c:30:f5:24:81: 01:60:6a:76:01:cb:31:6a:67:0b:89:22:bb:82:59: da:7e:c2:22:4b:c5:92:8c:c5:cc:58:68:56:b1:66: 78:ae:b3:27:20:7b:49:73:15:99:81:bb:8e:4e:4f: 7b:ef:72:8d:d3:c8:bf:f0:3b:8f:90:7a:bb:9a:e8: 4e:64:0a:4f:95:a6:db:0a:a9:0f:07:01:a9:bb:73: 58:d7:61:bc:ee:e2:1b:09:12:4b:38:09:8b:0b:1f: 60:bd:bf:9e:3e:20:13:0a:4a:22:fc:f2:9b:b5:2d: 47:77:f4:36:ee:cd:79:da:de:42:e6:21:98:32:bc: 35:16:03:73:96:52:dd:36:63:a5:23:e6:aa:b9:02: 5c:ae:16:99:ef:8b:bc:38:0f:8a:0f:34:dc:30:b3: 84:34:17:de:f9:c9:6f:b2:9e:b3:52:13:06:08:a6: 7c:0f:5d:05:02:3e:39:da:ad:38:e3:d4:5b:0f:56: ea:09:cb:80:ac:49:05:b8:80:48:b7:48:55:83:6f: 92:ad:8b:b2:f1:6e:8b:8a:7e:6d:38:5f:dc:a8:d3: 48:13:d4:51:f3:ba:8b:b4:fd:95:bb:63:2c:1d:15: 51:8c:ff:fa:84:04:21:42:0b:b2:a3:8e:c1:c1:82: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:FA:2A:A8:29:F2:CE:B5:A4:4C:67:8E:E1:C0:EA:8D:CA:53:7F X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:92:d7:42:fc:5f:a5:9e:76:b0:30:23:88:53:d1:d3:ec: 1a:bb:e9:e5:07:64:0f:13:d7:0b:a5:8c:41:87:f2:43:dc:cd: 56:f7:17:c3:f4:8d:f7:85:78:5d:9e:58:9f:52:4c:b2:7c:72: 3c:f1:ec:3d:e6:0e:78:8e:5e:13:6f:02:92:1a:c8:65:94:64: 4e:22:6f:5f:a3:4d:9a:18:b6:57:1c:f2:b6:17:a6:c3:c1:53: 7f:9a:31:b4:15:c8:57:fb:47:b0:00:47:4c:09:03:3e:66:d0: 64:90:03:db:fd:94:d1:68:d0:3f:98:37:a6:65:65:80:56:11: 67:58:a0:6b:0c:58:f5:71:4e:03:a0:63:71:9a:7c:c4:44:15: d5:3f:25:71:b2:bc:06:c5:be:4f:aa:2b:a1:8d:f6:0e:3b:39: 50:9a:c9:90:e7:2d:89:28:f8:90:79:05:92:e4:7e:a6:a0:1f: 2b:b5:bc:9c:90:51:de:70:9e:45:23:cd:cb:b8:f2:2f:f3:0b: 86:19:56:df:69:6c:10:43:de:29:1a:68:25:c5:c8:4c:a9:23: 82:90:39:f5:5b:26:4f:df:e0:94:2c:bb:64:66:12:5a:8b:eb: 79:23:f7:ae:92:76:ed:6f:a3:7d:3f:e2:ac:79:36:28:af:77: 9c:a3:f2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUwODIyMjEzMzUyWhcNMjUwODI5MjEzMzUyWjAYMRYwFAYD VQQDEw02OGE4ZTI0MC1kNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW1ge2pnNIsnjDD1JIEBYGp2AcsxamcLiSK7glnafsIiS8WSjMXMWGhWsWZ4 rrMnIHtJcxWZgbuOTk9773KN08i/8DuPkHq7muhOZApPlabbCqkPBwGpu3NY12G8 7uIbCRJLOAmLCx9gvb+ePiATCkoi/PKbtS1Hd/Q27s152t5C5iGYMrw1FgNzllLd NmOlI+aquQJcrhaZ74u8OA+KDzTcMLOENBfe+clvsp6zUhMGCKZ8D10FAj452q04 49RbD1bqCcuArEkFuIBIt0hVg2+SrYuy8W6Lin5tOF/cqNNIE9RR87qLtP2Vu2Ms HRVRjP/6hAQhQguyo47BwYJ70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHk+iqo KfLOtaRMZ47hwOqNylN/MB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA75LXQvxfpZ52sDAjiFPR0+wau+nlB2QPE9cLpYxBh/JD3M1W9xfD 9I33hXhdnlifUkyyfHI88ew95g54jl4TbwKSGshllGROIm9fo02aGLZXHPK2F6bD wVN/mjG0FchX+0ewAEdMCQM+ZtBkkAPb/ZTRaNA/mDemZWWAVhFnWKBrDFj1cU4D oGNxmnzERBXVPyVxsrwGxb5PqiuhjfYOOzlQmsmQ5y2JKPiQeQWS5H6moB8rtbyc kFHecJ5FI83LuPIv8wuGGVbfaWwQQ94pGmglxchMqSOCkDn1WyZP3+CULLtkZhJa i+t5I/euknbtb6N9P+KseTYor3eco/KN -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:17 2025 by rpki-client